The private keys of eight eMudhra intermediate CA certificates have been compromised. These certificates chain to roots trusted by Mozilla, Microsoft, Apple, and Chrome, meaning any software with bundled certificate lists must be urgently updated.
Background
Certificate Authority (CA) compromises allow attackers to issue fraudulent TLS certificates, enabling man-in-the-middle attacks. This incident requires urgent updates across all major operating systems and software ecosystems.
- Source
- Simon Willison
- Published
- Oct 21, 2026 at 07:50 AM
- Score
- 9.0 / 10